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(TSt/Sit/Ni‘) IntIOdUCtion

US. as World ’5 Telecommunications Backbone

much of the world’s \

communications ﬂow
through the US.

- Atarget’s phone call, e-mail
or chat will take the
cheapest path, not the
mysically most direct
path — you can’t always
predict the path.

- Your target’s
communications could

easily be ﬂowing into and 7
throth the  / International Internet Regional Bandwidth Capacity in 201 1

Source: Telegeugrupliy Research
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T wo Types of Collection

 

Upstream

- Collection of communications on fiber cables
and infrastructure as data flows past.

(FAIRVIEW, STORMBREW, BLARNEY,

 

 

KSR) l
You '7 .  3 l  _
Should ‘ " W '

Use Both

 

‘f
- Collection directly from the servers of these U.S.
Service Providers: Microsoft, Yahoo, Google

Facebook, PaITalk, AOL, Skype, YouTube
Apple.
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W by Use B 0th .' PRISM vs. Upstream

PRISM Upstream
ys. based service Worldwide

DNI Selectors .
prov1ders sources

Worldwide

DNR Selectors Coming soon
sources

Access to Stored

Communications J
(Search)

Real-Time Collection
(Surveillance) ‘/

“Abouts” Collection ®
Voice Collection s/Voice over IP

Direct Relationship with ® . a
C omms Providers only thlouoh FBI

~/
~/
®
~/
\/
\/
s/
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What Will You Receive in Collection
(Surveillance and Stored Connns)?
It varies by provider. In general:

Current Providers

 

E-mail
Microsoft (Hotmail, etc.) Chat — Vid€0~ voice
Google Videos
Yahoo! Phoms

Stored data
Fae-ebook VOIP
PalTalk

File transfers

YouTube Video Conferencing

Skype Notifications of target activity — logins, etc.
AOL Online Social Networking details

Apple Special Requests

 

 

 

 

 

 

 

Complete list and details on PRISM web page:
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('I‘S,~I.v"'Sl..v’1v"NI“)Dates When PRISM Collection
Began For Each Provider

$$

YouTube
9/24/10
PalTalk

Faceb 12/7/09
G I ok
ooge 6/3/09

1/14/09
M n PRISM Program Cost: ~
ICI‘OSO
9/11/07 $20M per year
|

| I I
2007 2008 2011 2012 2013

'l‘(§)P SECR 1;"1‘ “T’SlvV"(._)RC(_)N a N()l<‘(_)RI\'

 

 

 

TOP SECRET//SI//ORCON//NOFORN a Hotma" 00 k, You
'Vld I  mail ‘

(TS//SI//NF) FAA702 Reporting Highlight
PRISM and ST ORMBRE W Combine

SAME-DAY NTOC/FBI COLLABORATION

PREVENTS 150GB EXFIL EVENT FROM CLEARED DEFENSE CONTRACTOR (CDC)

(«ITOC TIPS FBI TO
IMMINENT THREAT

2 NTOC tips the
FBI to the

activity The FBI contacts the

CDC and works with
them to clean the
4 . . ﬁshx'er':
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Target Analyst inputs selectors into
Unified Targeting Tool (UTT)

Surveillance —‘> l {k 4 Pending Stored Comms

 

 

 

 

 

Special FISA Oversight and Processing
(3V4)

Stored Comms Review Nalidation

82 FAA Adjudicators in Each Product Line

Targeting Review/Validation

 

 

 

 

 

 

 

 

Surveillance — a l, v 4—- Pending Stored Comms

 

Targeting and Mission Management (8343)

Final Targeting Review and Release

l l
Unified Targeting Tool (UTT)
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PRINTAURA; Site Selector
Distribution Manager

 

 

 

 

 

V¢— Pending Stored Comms

FBI
Electronic Communications Surveillance Unit (ECSU)
Research & Validate NO USPERs

Surveillance ~ -->

 

 

 

 

 

 

 

Targeting <— Stored Comms Release

Providers 4 Selectors ' PINWALE
FBI v

(Google’ Data Intercept Technology Unit (DITU) Collection NUCLEON’

Yahoo, etc.) Couection etc.
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FBI DITU
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PRISM Provider
P1: Microsoft

P2: Yahoo

P3: Google

P4: Facebook
P5: PalTalk : IM (chat)

P6: YOUTUbe : RTN-EDC (real-time notiﬁcation of an e-mail event such as a login
P73 Skype sent message)

P83 AOL : RTN-lM (real-time notiﬁcation of a chat login or logout event)

PA: Apple . E-Mail

F: VolP

G: Full (WebForum)

H: OSN Messaging (photos. wallposts, activity, etc.)

I: OSN Basic Subscriber Info

J: Videos

. (dot): Indicates multiple types

Fixed trigraph, denotes Year CASN established
PRISM source collection for selector

 

 

 

 

 

 

 

 

Content Type

: Stored Comms (Search)

 

 

 

 

 

 

 

'l‘()P SL‘CRL'I‘VSl ‘()RC( )N .‘N()l’(r)Rl\'

 

AOL iv mail

ﬂ
lk
8', «m ta Y°u

("l‘Sy-WS1.1-".s‘Nl“) REPRISMFISA TIPS
—

I ’v-'~"Z. :J-LE NISNEI' 7ILIII~LE ZL-urI-TBVII'AI:IO9SE(R[1 - 3111 001(0‘ \DFOR‘-

o COUNTERTERRORISM

 is? a) 5,

‘IV.7‘-.
,‘1

Lost Load on Apr 05.2013 at 12:22 PM 6‘"

«Alin I .: ‘ The '39aeru'orm [elm (an be 4:90 3-:- e '  i: see 3 :5'2 n5', :2
vex-rd?

31-."- h h-I;

we - 3F

[mu .lll"|| th.’

I~ "mum-a1

NIH

I Prism Current Entries

Rounds 1 7 500010! “7.15 Page ' of 235! ‘ v‘i Words porpaqc: ‘ v

Um: S-Ill Uldv‘l (Ink on column headen to 90K. ‘ : (olumn u not sonnbk.

 

